Shameless plug: I wrote a little guide[1] how to use keybase.io and GPG to sign git commits. It was posted on HN a while ago[2].
"Ironically, only the first commit is signed."
[1] https://github.com/pstadler/keybase-gpg-github
[2] https://news.ycombinator.com/item?id=12289481